PCSE Question 95

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  Answer D You can use the iam.disableServiceAccountCreation boolean constraint to disable the creation of new service accounts. This allows you to centralize management of service accounts while not restricting the other permissions your developers have on projects.

• 1

  In the question, it is clearly mentioned that -> You want to accomplish this centrally across the organization. So, it would obviously be D

• Chose A1

  Are they not conflicting - restricting service account creation capability within production environments & enforcing policy across Org ?